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Top Stories 

• A U.S. Air Force report revealed that the near-crash and ensuing fire in a RC-135V aircraft 
in April was caused by an oxygen leak due to an improperly tightened retaining nut 
connecting tubing in the aircraft’s galley. - CNN (See item 3) 

• BNY Mellon Corp worked to address an issue August 26 in its InvestOne system, after the 
system broke down over the weekend of August 22 and created a backlog of funds to price. 

- Reuters (See item 5) 

• Utah-based Novacare, LLC issued a voluntary recall August 24 of several lots of various 
brands of its dietary supplements due to mislabeling and undeclared salicylic acid. - U.S. 
Food and Drug Administration (See item 15) 

15 

• Fire Crews across the Northwest worked August 27 to contain about 50 large wildfires that 
have burned nearly 1.6 million acres in parts of Washington, Oregon, Idaho, and Montana. 

- Reuters (See item 22) 
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Energy Sector 



See item 25 

Chemical Industry Sector 

1. August 26, Salisbury Post - (North Carolina) HAZMAT crews respond to small 
chemical spill at AkzoNobel. HAZMAT crews and fire personnel were called as a 
precaution to a small chemical spill August 25 at Ak z oNobel Chemicals Inc., after an 
ingredient used to make label adhesive self-reacted at the Springs Road plant in 
Salisbury, North Carolina. No injuries were reported. 

Source: http://www.salisburvpost.com/2015/Q8/26/hazmat-crews-respond-to- 
akzonobel-chemical-spill/ 

For another story, see item 25 

Nuclear Reactors, Materials, and Waste Sector 

See item 25 



Critical Manufacturing Sector 

2. August 26, U.S. Consumer Product Safety Commission - (National) Robert Bosch 
Tool recalls Dremel Rotary Tool due to burn hazard. Robert Bosch Tool Corp., 
issued a recall August 26 for about 93,000 Dremel MICRO Model 8050 Rotary Tools 
due to an issue that could cause the tool’s circuit board to overheat and melt its 
enclosure, posing a bum hazard and possibly causing the device to lose speed control or 
turn on and off inadvertently. The product was sold at Ace Hardware, Home Depot, 
Lowe’s, Menards, and other hardware and retail stores nationwide, and online from 
July 2014 - May 2015. 

Source: http://www.cpsc.gov/en/Recalls/2015/Robert-Bosch-Tool-Recalls-Dremel- 
Rotary-Tool/ 

For another story, see item 25 

Defense Industrial Base Sector 

3. August 27, CNN - (National) Loose nut costs Air Force $62.4 million in accident. A 

U.S. Air Force report published in early August revealed that the near-crash and 
ensuing fire in a RC-135V aircraft in April, which caused $62.4 million in damage, was 
caused by an oxygen leak due to an improperly tightened retaining nut connecting 
tubing in the aircraft’s galley. The report attributed the failure to L-3 Communications 
depot personnel who were responsible for the plane’s maintenance. 

Source: http://www.cnn.com/2015/08/27/politics/loose-nut-air-force-crash/ 
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Financial Services Sector 



4. August 27, Softpedia - (International) PayPal fixes XSS flaw that allowed access to 
unencrypted credit card details. PayPal addressed a cross-site scripting (XSS) flaw 
on the Web site’s SecurePayments page in which an attacker could inject customized 
payment forms into the page HyperText Markup Language (HTML) in order to 
intercept user financial and PayPal login information in clear text. 

Source: http://news.softpedia.com/news/pavpal-fixes-xss-flaw-that-allowed-access-to- 
unecrypted-credit-card-details-4902 1 7 . shtml 

5. August 26, Reuters - (National) BNY Mellon pricing glitch affects billions of dollars 
of funds. BNY Mellon Corp worked to address an issue August 26 in its InvestOne 
system that is uses to calculate prices for client mutual funds and exchange traded 
funds (ETF), after the system broke down over the weekend of August 22 and created a 
backlog of funds to price. The system, run by SunGard, was operating at limited 
capacity August 25. 

Source: http://www.reuters.com/article/2015/08/26/bnymellon-funds-nav- 
idUSLlN1112FT20150826 

6. August 26, WLS 7 Chicago - (Illinois) ‘Uptown Beach Bandit’ robs 3 North Side 
banks. The FBI is searching for a suspect dubbed the “Uptown Beach Bandit” who 
authorities allege has robbed 3 North Side banks in Chicago since August 5, with the 
latest robbery occurring August 22 at a TCF bank. The suspect is considered armed and 
dangerous. 

Source: http://abc7chicago.com/news/uptown-beach-bandit-robs-3-north-side- 
banks/957607/ 

Transportation Systems Sector 

7. August 27, Dallas Morning News - (Texas) Big rig overturns on Dead Man’s Curve 
spilling watermelons onto C.F. Hawn Freeway. All lanes of westbound C.F. Hawn 
Freeway near Houston were shut down for several hours August 26 while crews 
cleaned up 36,000 pounds of watermelon that spilled from a semi-truck that lost control 
on “Dead Man’s Curve”. No injuries were reported. 

Source: http://thescoopblog.dallasnews.com/2015/08/big-rig-overtums-on-c-f-hawn- 
freewav-spilling-watermelons-onto-highway.html/ 

8. August 26, KDVR 31 Denver - (Colorado) Tanker crash shuts down southbound I- 
25, sparks brush fire. Interstate 25 southbound lanes between Monument and 
Farkspur reopened after being shut down for approximately 3 hours while northbound 
lanes were shut down indefinitely August 26 as crews responded to an accident that 
involved a semi-truck hauling jet fuel which burst into flames. A HAZMAT crew 
responded to the scene and the cause of the accident is believed to have been a 
mechanical failure. 

Source: http://kdvr.com/2015/08/26/tanker-on-fire-on-sb-i-25-shuts-down-highway- 
between-monument-larkspur/ 
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9. August 26, Houston Chronicle - (Texas) Big-rig crash snarls Eastex rush-hour. U.S. 
59 in Houston reopened after being shut down for several hours August 26 while crews 
cleared the scene of a 5-vehicle accident caused when a semi-truck hit a concrete 
barrier and toppled into the HOV lanes. No injuries were reported. 

Source: http://www.chron.com/houston/article/Big-rig-crash-snarls-Eastex-rush-hour- 
6466228 .pirn 

10. August 25, WXIA 11 Atlanta - (Georgia) Water restored after Buford Highway 
water main break. A large water main break shut down parts of Buford Highway in 
Gwinnett County August 25 after asphalt buckled on the highway, prompting the 
Georgia Department of Transportation to inspect the roadway’s structure. The 10-inch 
main break also impacted water service to at least 1 area school as well as several other 
customers. 

Source: http://www.llalive.com/story/news/local/suwanee/2015/08/25/buford- 
highway- water- main-break/323 13 161/ 

Food and Agriculture Sector 

11. August 26, West Hawaii Today - (Hawaii) Wilt disease leads to ban of ohia 
shipments. The Hawaii Board of Agriculture approved August 26 an emergency 
quarantine of ohia plants, seeds, mulch, leaves, untreated wood, and other products for 
1 year, taking effect around September 7 in an effort to keep the ohia wilt deadly 
fungus from spreading into forests and other islands. The quarantine also includes the 
restriction of movement of soil off the island beginning in January 2016, after the 
fungus reportedly spread to more than 18,500 acres of forest in the area. 

Source: http://www.westhawaiitoday.com/news/local-news/wilt-disease-leads-ban- 
ohia-shipments 

12. August 26, U.S. Food and Drug Administration - (National) General Mills voluntarily 
recalls a limited quantity of frozen Cascadian Farm Cut Green Beans. 
Minneapolis-based General Mills announced a voluntary Class I recall August 26 of a 
limited quantity of its frozen Cascadian Farm Cut Green Beans packaged in 10 ounce 
bags due to the potential presence of Listeria monocytogenes after 1 package tested 
positive for the bacteria. The products were distributed to retail establishments 
nationwide and no illness have been reported. 

Source: http://www.fda.gov/Safety/Recalls/ucm459964.htm 

13. August 26, U.S. Food and Drug Administration - (National) Sam Mills USA LLC 
recalls Gluten Free Chocolate Chip Granola Bars due to undeclared dairy. Sam 
Mills USA LLC issued a voluntary recall August 25 of approximately 11,083 cases of 
its Gluten Free Chocolate Chip Granola Bars packaged 4.4 ounce boxes due to 
mislabeling and a risk of cross-contamination with dairy. The products were sold at 
retail stores nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm459849.htm 

14. August 26, U.S. Food and Drug Administration - (National) Sid Wainer and Son 
recalls Jansal Valley Raw Macadamia Nuts due to possible health risk. 
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Massachusetts-based Sid Wainer and Son issued a voluntary recall August 25 of its 
Jansal Valley branded Raw Macadamia Nuts packaged in 1-pound and 8-ounce 
packages due to potential Salmonella contamination. The products were distributed to 
retail stores and through mail orders nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm459887.htm 

15. August 26, U.S. Food and Drug Administration - (National) Novacare, LLC issues 
voluntary nationwide recall of dietary supplements due to undeclared salicylic 
acid. Utah-based Novacare, LLC issued a voluntary recall August 24 of several lots of 
various brands of its dietary supplements due to mislabeling and undeclared salicylic 
acid, which is acutely toxic. The unapproved dietary supplements were distributed 
nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm459815.htm 

16. August 25, KGW 8 Portland - (Washington) Cooking oil in creek kills up to 100,000 
fish. The Washington Department of Ecology reported August 25 that nearly 100,000 
fish were killed after 1,100 gallons of burning vegetable oil leaked into Olequa Creek 
in Lewis County following a fire that broke out the week of August 17 at Olympic 
Trading Corporation. Crews have removed about 84,000 gallons of contaminated water 
out of the creek. 

Source: http://www.kgw.com/storv/news/2015/08/25/cooking-oil-creek-kills-up- 
1 00000-fish/3 23 67 721/ 

Water and Wastewater Systems Sector 

17. August 27, Reuters - (Hawaii) Honolulu’s Waikiki Beach reopened after massive 
sewage spill. City and County of Honolulu officials reopened the Waikiki Beach 
August 26 and removed warning signs after water quality tests indicated the ocean was 
safe, following an incident where 500,000 gallons of waste water spilled earlier in the 
week due to heavy rains August 24. 

Source: http://news.yahoo.com/honolulus-waikiki-beach-reopened-massive-sewage- 
spill-073523847.html 

18. August 26, Seattle Times - (Washington) Seward Park beach closed after sewage 
spill in Lake Washington. Seattle Public Utilities reported that about 12,000 gallons 
of sewage from a large underground storage tank spilled into Lake Washington August 
26, prompting the closure of the beach at Seward Park while officials take water 
samples to test for possible fecal coliform. 

Source: http://www.seattletimes.com/seattle-news/health/seward-park-beach-closed- 
after-sewage-spill-in-lake-washington/ 

For additional stories, see items 10 , 16 and 25 

Healthcare and Public Health Sector 

19. August 27, Help Net Security - (National) 81% of healthcare organizations have 
been compromised. Security researchers with KPMG conducted a survey with input 
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from chief information officers, chief technology officers, chief security officers, and 
chief compliance officers at about 5,000 health care providers and health plans and 
determined that 8 1 percent of health care executives believe that their organizations 
have been compromised by at least 1 malware, botnet, or other cyber-attack in the last 2 
years. Polling also found that 65 percent of attacks within an organization were 
external, and that only half of organizations feel that they are adequately prepared in 
preventing attacks, among other findings. 

Source: http://www.net-securitv.org/secworld.php?id=18796 

20. August 26, Seattle Times - (Washington) Seattle Children’s Bellevue clinic warns of 
potential infection risk. Officials at Seattle Children’s Bellevue Clinic and Surgery 
Center in Washington announced August 26 that up to 12,000 children and young 
adults treated at the clinic since 2010 could be at risk of infection from improperly 
sterilized surgical instruments. The clinic set up free tests for patients to monitor for 
any blood-bome viruses, and stated that the problem has been corrected. 

Source: http://www.seattletimes.com/seattle-news/health/seattle-childrens-bellevue- 
clinic-warns-of-exposure-to-potential-risk-of-infection/ 

For another story, see item 25 

Government Facilities Sector 

21. August 27, WKBN 27 Youngstown - (Ohio) Bomb threat prompts closing of Niles 
schools. A bomb threat prompted the closure of all Niles district schools in Ohio 
August 27 after a cafeteria worker at one of the schools received a phoned threat 
warning that a building would be blown up. Police reported to the scene to investigate 
the threat. 

Source: http://wkbn.com/2015/08/27/bomb-threat-prompts-closing-of-niles-schools/ 

22. August 27, Reuters - (National) Wildfire smoke fouls air across U.S. Northwest. Fire 
Crews across the Northwest worked August 27 to contain about 50 large wildfires that 
have burned nearly 1.6 million acres in parts of Washington, Oregon, Idaho, and 
Montana. The wildfires have forced evacuations for thousands of residents, killed 3 
firefighters, and prompted an air quality warning in the region due to unhealthy and 
smoky air. 

Source: http://www.reuters.com/article/2015/Q8/27/us-usa-wildfires- 
idUSKCN0QV29Y20 150827 

For another story, see item 10 

Emergency Services Sector 

23. August 26, Associated Press - (Texas; Kentucky) Inmate who fled minimum-security 
prison in Kentucky captured in Texas, found at Galveston home. The Galveston 
County Sheriff’s Office reported August 25 that an inmate who escaped from the 
Blackburn Correctional Complex in Lexington, Kentucky, April 7 was recaptured in 
Texas. 
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Source: 

http://www.tribtown.com/view/storv/bbc5ec5ba61c4be29874833e56652d0d/TX- 

Kentucky-Escaped-Inmate 

Information Technology Sector 

24. August 27, The Register - (International) FireEye intern VXer pleads guilty for 
Darkode droid RAT ruse. A former FireEye intern from Pittsburgh pleaded guilty to 
creating and selling the Dendroid remote access trojan (RAT) for Android phones on 
the Darkode hacker forums. Denroid was capable of infecting about 1,500 phones for 
each buyer, while it is unknown how many copies the suspect sold. 

Source: 

http://www.theregister.co.uk/2015/08/27/fireeye intern vxer pleads guilty for darko 
de droid rat ruse/ 



25. August 27, Threatpost - (International) Endress+Hauser patches buffer overflow in 
dozens of ICS products. Endress+Hauser and CodeWrights released updates 
addressing a remotely exploitable vulnerability found in the Device Type Manager 
(DTM) library of dozens of Endress+Hauser’ s products used for industrial process 
automation, in which an attacker could use a specially crafted packet to create a buffer 
overflow in the DTM, causing the affected product to hang indefinitely. 

Source: https://threatpost.com/endresshauser-patches-buffer-overflow-in-dozens-of-ics- 
products/ 114429 

26. August 27, Securityweek - (International) Small percentage of employees responsible 
for most cloud security risk: Report. Report findings from a CloudLock analysis of 
10 million users across 1,800 organizations revealed that the top 1 percent of users in 
organizations are responsible for 57 percent file ownership, 81 percent of file shares, 73 
percent of exposed files, and 62 percent of application industries, suggesting that cyber 
risks could be mitigated by reaching out to an organization’s top users, among other 
findings. 

Source: http://www.securitvweek.com/small-percentage-employees-responsible-most- 
cloud-security-risk-report 

For another story, see item 4 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

27. August 26, Brainerd Dispatch - (Minnesota) Accidental fiber cut causes 2+ day 
Internet outage near Aitkin. CenturyLink officials reported that 2,197 DSL Internet 
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customers around Aitkin, Crosby, Deerwood, and Detroit Lakes were without service 
from August 22 to August 24 after a third-party vendor inadvertently cut a fiber line. 
Source: http://www.brainerddispatch.com/news/3826028-accidental-fiber-cut-causes-2- 
day-internet-outage-near-aitkin 

28. August 26, Glen Falls Post-Star - (New York) Thurman phone outage could last 
into Thursday. The town of Thurman in New York was without phone and Internet 
service August 25 after a vehicle hit a utility pole, damaging Verizon equipment and 
forcing residents to use phones in nearby towns, or at the local Town Hall or fire 
station. Officials reported that service may not be restored until August 27. 

Source: http://poststar.com/news/local/thurman-phone-outage-could-last-into- 
thursday/article 4e2264ec-e9f0-592b-af82-9ba68 12b5967.html 

Commercial Facilities Sector 



29. August 27, Buffalo Time Warner Cable News - (New York) Apartment building 
evacuated during overnight fire. More than 100 residents were evacuated from an 
apartment building in Buffalo for several hours overnight August 26 while crews 
responded to a fire that started in an apartment on the sixth floor. The cause of the fire 
is unknown and no injuries were reported. 

Source: http://www.twcnews.com/nys/buffalo/news/2015/08/27/apartment-building- 
evacuated-during-overnight-fire.html 

30. August 26, Redding Record Searchlight - (California) Apartment fire displaces 15 
people; no injuries. A three-alarm fire that started in a carport in downtown Redding 
destroyed 7 cars and 4 units in the Islander Apartment Complex, displacing 15 
residents August 26. There were no injuries reported and investigators believe the fire 
was intentionally set. 

Source: http://www.redding.com/news/local-news/structure-fire-closes-east-street-in- 
redding 

31. August 26, WGN 9 Chicago - (Illinois) 5 injured in Old Town fire near Second City. 
A three-alarm fire that officials believed started from a grease fire at the Adobo Grill 
restaurant destroyed the offices of the Second City theatre company in Chicago August 
26 and injured 4 firefighters along with another person. All August 27 performances 
were canceled. 

Source: http://wgntv.com/2015/08/26/two-alarm-fire-reported-in-chicagos-old-town- 
neighborhood/ 

For another story, see item 27 

Dams Sector 



See item 25 



- 8 - 




NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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